Blog

Cisco fixes critical UCCX flaws, patch ASAP! (CVE-2025-20358, CVE-2025-20354)

Cisco has fixed two critical vulnerabilities (CVE-2025-20358, CVE-2025-20354) affecting Unified Contact Center Express (UCCX), which may allow attackers to bypass authentication, compromise vulnerable installations, and elevate privileges to root. The good news is that there is currently no evidence of the vulnerabilities being leveraged by attackers. However, updating to a fixed version is advised, as there are no workarounds for addressing them. CVE-2025-20358 and CVE-2025-20354 fixed, along with other flaws Cisco UCCX is a contact-center … More → The post Cisco fixes critical UCCX flaws, patch ASAP! (CVE-2025-20358, CVE-2025-20354) appeared first on Help Net Security.
http://news.poseidon-us.com/TP6VH4

Ping Identity offers protection against adversarial AI threats

Ping Identity announced “Identity for AI,” a new solution designed to secure the world of AI agents. As organizations embrace agentic AI to boost productivity and commerce, Ping Identity is redefining how enterprises enable this new class of autonomous digital identities, delivering visibility, access control, governance, and privilege oversight to build trust into every interaction. Identity for AI will help enterprises engage the agentic commerce channel, secure the autonomous workforce, and protect against adversarial AI … More → The post Ping Identity offers protection against adversarial AI threats appeared first on Help Net Security.
http://news.poseidon-us.com/TP6Qc2

Team Cymru RADAR investigates external infrastructure in real time

Team Cymru announced RADAR, a new real-time discovery module designed to give threat analysts visibility into all internet-facing infrastructure, whether known or unknown, without waiting on asset inventories, third-party scans, or compliance-oriented tools. “Our RADAR solution is about giving defenders the power to investigate external infrastructure in real time — their own or anyone else’s – and take action immediately,” said Joe Sandar, CEO, Team Cymru. Cyber threat analysts and intelligence teams often face a … More → The post Team Cymru RADAR investigates external infrastructure in real time appeared first on Help Net Security.
http://news.poseidon-us.com/TP6Qbv

SonicWall cloud backup hack was the work of a state actor

Incident responders from Mandiant have wrapped up their investigation into the SonicWall cloud backup service hack, and the verdict is in: the culprit is a state-sponsored threat actor (though the specific nation wasn’t disclosed). “[The incident] was isolated to the unauthorized access of cloud backup files from a specific cloud environment using an API call. The incident is unrelated to ongoing global Akira ransomware attacks on firewalls and other edge devices,” SonicWall said on Tuesday. … More → The post SonicWall cloud backup hack was the work of a state actor appeared first on Help Net Security.
http://news.poseidon-us.com/TP6QZB